44326S3 


GENERATION OF PARTIAL TRACES IN MODEL CHECKING 
ABSTRACT 

A method for checking a model includes specifying a 
path to be traversed through the states of a system under 
5 study, such that a specified sequence of events is to 
occur on the specified path between an initial state and 
a target set of states on the path. Beginning from the 
initial state, successive reachable sets of states along 
J;: the specified path are computed, such that in the 
OlO successive reachable sets the events occur in the 
SI specified sequence. When an intersection is not found to 

nj exist between one of the reachable sets on the specified 
Ji path and the target set, a partial trace is produced 
5 along the specified path between the initial state and a 

2l5 termination state in which at least one of the specified 
H events occurs. 
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